This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/04F97454F8EE11F0967655F96A6F56BC.roa
File:                     04F97454F8EE11F0967655F96A6F56BC.roa (raw, json)
Hash identifier:          OwlU8C8SG1NDanAv5sQxA+qc7yjspfS/vylGd6aqK9Q=
Subject key identifier:   E9:60:9C:CA:99:4E:79:07:DA:79:29:97:97:E6:09:C3:33:BE:BD:C6
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       08E7
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/04F97454F8EE11F0967655F96A6F56BC.roa
Signing time:             Sat 24 Jan 2026 06:29:22 +0000
ROA not before:           Sat 24 Jan 2026 06:29:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.72.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2279 (0x8e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Jan 24 06:29:22 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=697466c2-6a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:37:72:53:27:63:87:51:64:21:56:b3:55:
                    ca:65:a9:13:b2:30:5c:99:11:db:bb:3a:ca:ea:02:
                    64:6b:65:62:aa:3a:cd:94:eb:41:7d:b2:5b:8b:a3:
                    03:dc:68:60:b6:73:da:14:e3:d3:70:be:73:d4:61:
                    24:63:31:81:01:ba:ec:ad:41:ba:91:ff:68:5a:af:
                    9d:ee:ba:bf:17:38:77:de:48:27:33:82:f2:b8:31:
                    77:2b:40:9d:12:0f:18:21:24:e5:9a:43:fc:08:27:
                    68:b0:22:e4:aa:24:fa:54:87:d6:7e:f5:61:63:fd:
                    a0:82:27:25:2c:df:d4:3f:12:f0:84:8e:7e:50:f0:
                    7e:68:97:69:47:47:90:9b:12:2f:e2:8c:39:07:36:
                    64:ec:0c:c1:ba:4f:ee:41:b6:94:72:01:6e:27:ad:
                    f3:3d:fe:ec:a5:ec:34:99:4d:09:a2:d3:50:f4:22:
                    ce:69:69:49:03:50:49:1e:77:f9:5c:46:77:4a:70:
                    30:09:ac:c0:95:4b:ff:01:3f:40:d9:cf:93:ca:05:
                    2b:86:a2:41:da:f4:e3:26:b2:1e:2b:22:3c:6a:f2:
                    21:57:e1:f9:77:81:de:ba:30:43:a2:0f:30:8b:95:
                    ad:04:65:7a:91:56:86:54:57:b1:40:a3:83:86:8f:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:9C:CA:99:4E:79:07:DA:79:29:97:97:E6:09:C3:33:BE:BD:C6
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/04F97454F8EE11F0967655F96A6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b5:71:41:05:01:b8:dd:12:7b:72:30:af:e7:13:a5:d6:2b:
         c9:ee:9c:d1:ca:5a:d0:92:24:31:19:72:44:b9:54:15:ee:16:
         30:ae:db:fb:30:d1:48:ba:37:34:ca:c8:17:18:c7:fe:9e:33:
         21:52:41:dc:eb:68:7d:80:bf:db:b0:82:a8:43:0d:7c:f2:cd:
         c8:24:5d:11:e4:49:3a:e9:3d:58:3f:0a:26:8e:03:08:92:a1:
         dd:7b:24:04:05:5f:bb:eb:ea:aa:ad:7e:d0:eb:63:a1:7e:2f:
         70:75:60:4b:40:fa:2d:d6:f0:17:65:34:ec:d4:0f:99:af:cb:
         24:ec:12:5e:6b:5b:34:b7:63:6b:61:13:c8:a1:b7:e0:36:85:
         6e:38:52:b9:5f:1b:65:72:07:69:fc:78:b6:25:23:16:07:c6:
         d9:42:8c:c5:65:88:89:40:b9:c4:35:87:95:a7:56:11:09:38:
         48:c9:39:0f:a1:27:7e:e0:8c:93:b1:f8:e1:54:48:d5:ce:e2:
         e4:cb:fe:e4:ad:5d:db:87:eb:88:89:de:2a:e5:3d:37:f8:f6:
         0e:0a:1f:4b:32:86:77:95:12:21:7b:c2:67:27:bd:f7:9c:7c:
         3a:6e:42:b0:ad:85:db:c8:9f:a3:73:01:2e:c1:21:70:d5:44:
         c6:37:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:31 2026 by rpki-client